Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
File: eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft (raw, json)
Hash identifier: g79kmopHqV8gKF8jkZU1E5Wg19eWELTbcYayfApxrWs=
Subject key identifier: EE:11:BB:6C:6D:C4:52:5F:07:87:F7:B1:9A:EB:59:4B:55:CC:B4:74
Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
Certificate issuer: /CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Certificate serial: 0198D73AE1FEFA2903EC48CAC788DFAD77FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
Manifest number: 138B
Signing time: Sat 23 Aug 2025 14:00:16 +0000
Manifest this update: Sat 23 Aug 2025 14:00:16 +0000
Manifest next update: Sun 24 Aug 2025 14:00:16 +0000
Files and hashes: 1: eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl (hash: GsBYEp6ZJ+6u4tqw4gfwNzGg6Cc3CnzEHIvWEDzybNA=)
2: vchHJIw7jZ4Wv-xZM5fwqPOc5MI.roa (hash: FaIi1AdW4pumZbm44kEE9unKxXXirWba//1QTHPOeME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:e1:fe:fa:29:03:ec:48:ca:c7:88:df:ad:77:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Validity
Not Before: Aug 23 14:00:16 2025 GMT
Not After : Aug 24 14:00:16 2025 GMT
Subject: CN=ee11bb6c6dc4525f0787f7b19aeb594b55ccb474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:83:60:01:b7:30:5e:ab:e0:d7:d0:e0:8c:
fc:86:d6:37:92:79:82:ff:4e:1a:9e:21:91:02:8a:
dd:5c:4d:72:86:cd:e9:e5:6f:be:07:2a:8c:f1:51:
9d:c6:18:02:e2:84:72:81:93:37:67:73:ef:6a:7f:
13:60:7f:e9:49:38:14:6c:59:5b:a0:a6:c3:70:b1:
16:47:a5:fe:3b:cf:ff:f3:c0:28:1d:23:8b:41:6b:
51:6d:cb:4e:d2:02:ca:ec:8f:91:70:ce:11:63:fb:
c6:77:2e:7c:d7:a6:10:b9:20:a2:49:3c:13:fc:19:
76:ba:4f:9d:93:c7:d6:28:a7:ee:06:e9:67:29:1d:
00:9c:f5:7f:5a:b3:29:6e:e1:7d:f6:aa:3d:37:91:
a7:2b:60:06:8a:3d:92:ed:d3:b8:89:95:95:8c:01:
f8:03:af:89:83:a2:0c:54:05:66:54:9f:27:cf:49:
01:20:98:4c:e1:e0:7d:fc:1a:d7:b6:85:3d:b7:0f:
23:8b:de:92:e4:9a:f7:bb:2f:83:09:a7:2c:75:b7:
d7:8d:d1:64:26:3c:85:ed:91:b5:f3:21:21:86:30:
0b:3d:83:51:d7:30:50:54:ef:15:f5:71:2f:51:ee:
93:6f:e7:82:4b:3d:ed:37:f0:52:1e:72:8a:56:80:
73:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:11:BB:6C:6D:C4:52:5F:07:87:F7:B1:9A:EB:59:4B:55:CC:B4:74
X509v3 Authority Key Identifier:
keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d5:3b:ab:8e:a4:64:cc:f3:d1:83:f5:a0:38:ca:79:c4:e4:
e3:53:11:de:aa:da:f5:ca:3b:f8:90:6f:e4:25:be:b6:64:11:
f8:73:12:4a:51:08:4f:57:aa:de:44:00:c7:e6:78:3c:39:3c:
78:b2:67:ee:bd:9e:51:53:63:28:48:b9:16:36:e0:87:75:4a:
93:2a:f0:f4:cf:ea:69:1e:1f:98:93:2a:14:d2:ba:25:82:5c:
79:6b:3d:36:a6:28:89:87:f0:e2:f7:8f:d4:0e:c2:d0:18:3d:
f1:bc:4b:dc:eb:68:16:8a:19:d8:f0:75:46:6b:6f:92:3b:15:
9e:fa:b3:d1:64:51:1e:c8:1f:11:60:2a:b7:5b:eb:6e:49:e8:
38:1f:91:10:0a:45:52:a0:e7:1f:82:6c:28:57:99:6b:d2:7f:
66:47:d8:91:1d:f0:d3:f0:14:5c:22:9b:91:17:7a:58:9f:db:
90:17:9c:15:31:a0:b3:66:fe:25:53:00:d3:d8:23:a5:51:f2:
25:57:17:25:64:3c:20:5a:93:6e:a9:ab:22:2f:4c:e9:97:91:
5b:3d:53:32:2c:53:42:50:b7:51:b1:ce:c5:50:90:0e:1c:b5:
3c:49:78:5e:1e:3a:33:39:5f:e8:19:2e:9c:69:0c:e9:d4:cd:
ac:8b:e1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:13:27 2025 by rpki-client